Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
BID:23762
Info
Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
| Bugtraq ID: | 23762 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2005-4837 |
| Remote: | Yes |
| Local: | No |
| Published: | May 02 2007 12:00AM |
| Updated: | Jun 06 2007 10:20PM |
| Credit: | The initial discoverer of this issue is currently unknown. This issue was disclosed by the vendor. |
| Vulnerable: |
Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Sun Solaris 10_x86 Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 rPath rPath Linux 1 Net-SNMP Net-SNMP 5.2.1 .2 Net-SNMP Net-SNMP 5.2.1 Net-SNMP Net-SNMP 5.2 Net-SNMP Net-SNMP 5.1.2 Net-SNMP Net-SNMP 5.1.1 Net-SNMP Net-SNMP 5.1 Net-SNMP Net-SNMP 5.0.10 .2 Net-SNMP Net-SNMP 5.0.9 Net-SNMP Net-SNMP 5.0.8 Net-SNMP Net-SNMP 5.0.7 Net-SNMP Net-SNMP 5.0.6 Net-SNMP Net-SNMP 5.0.5 Net-SNMP Net-SNMP 5.0.4 .pre2 Net-SNMP Net-SNMP 5.0.3 Net-SNMP Net-SNMP 5.0.1 Net-SNMP Net-SNMP 0 Avaya Interactive Response 2.0 |
| Not Vulnerable: |
Net-SNMP Net-SNMP 5.3 Net-SNMP Net-SNMP 5.2.2 Net-SNMP Net-SNMP 5.1.3 |
Discussion
Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
Net-SNMP is prone to a remote denial-of-service vulnerability. The issue is exposed when Net-SNMP is configured to communicate over TCP; Net-SNMP using UDP is unaffected.
This issue affects Net-SNMP when running in 'master agentx' mode. An attacker can exploit this issue to cause the affected service to crash, effectively denying service to legitimate users.
Net-SNMP is prone to a remote denial-of-service vulnerability. The issue is exposed when Net-SNMP is configured to communicate over TCP; Net-SNMP using UDP is unaffected.
This issue affects Net-SNMP when running in 'master agentx' mode. An attacker can exploit this issue to cause the affected service to crash, effectively denying service to legitimate users.
Exploit / POC
Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution / Fix
Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
Solution:
This issue has been addressed in the following (and later) versions: 5.1.3, 5.2.2, 5.3.
Sun Solaris 10.0
Sun Solaris 10.0_x86
Net-SNMP Net-SNMP 5.1
Net-SNMP Net-SNMP 5.1.1
Net-SNMP Net-SNMP 5.1.2
Net-SNMP Net-SNMP 5.2.1 .2
Solution:
This issue has been addressed in the following (and later) versions: 5.1.3, 5.2.2, 5.3.
Sun Solaris 10.0
-
Sun 120272-07
http://sunsolve.sun.com/patches/
Sun Solaris 10.0_x86
Net-SNMP Net-SNMP 5.1
-
Net-SNMP Net--SNMP 5.1.3
http://sourceforge.net/project/showfiles.php?group_id=12694&package_id =11571&release_id=338903
Net-SNMP Net-SNMP 5.1.1
-
Net-SNMP Net--SNMP 5.1.3
http://sourceforge.net/project/showfiles.php?group_id=12694&package_id =11571&release_id=338903
Net-SNMP Net-SNMP 5.1.2
-
Net-SNMP Net--SNMP 5.1.3
http://sourceforge.net/project/showfiles.php?group_id=12694&package_id =11571&release_id=338903
Net-SNMP Net-SNMP 5.2.1 .2
-
Ubuntu libsnmp-base_5.2.1.2-4ubuntu2.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-base_5. 2.1.2-4ubuntu2.1_all.deb -
Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.1_amd64.deb -
Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.1_i386.deb -
Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.1_powerpc.deb -
Ubuntu libsnmp-perl_5.2.1.2-4ubuntu2.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp-perl_5. 2.1.2-4ubuntu2.1_sparc.deb -
Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.1_amd64.deb -
Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.1_i386.deb -
Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.1_powerpc.deb -
Ubuntu libsnmp9-dev_5.2.1.2-4ubuntu2.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9-dev_5. 2.1.2-4ubuntu2.1_sparc.deb -
Ubuntu libsnmp9_5.2.1.2-4ubuntu2.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.1_amd64.deb -
Ubuntu libsnmp9_5.2.1.2-4ubuntu2.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.1_i386.deb -
Ubuntu libsnmp9_5.2.1.2-4ubuntu2.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.1_powerpc.deb -
Ubuntu libsnmp9_5.2.1.2-4ubuntu2.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/libsnmp9_5.2.1. 2-4ubuntu2.1_sparc.deb -
Ubuntu snmp_5.2.1.2-4ubuntu2.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.1_amd64.deb -
Ubuntu snmp_5.2.1.2-4ubuntu2.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.1_i386.deb -
Ubuntu snmp_5.2.1.2-4ubuntu2.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.1_powerpc.deb -
Ubuntu snmp_5.2.1.2-4ubuntu2.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmp_5.2.1.2-4u buntu2.1_sparc.deb -
Ubuntu snmpd_5.2.1.2-4ubuntu2.1_amd64.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.1_amd64.deb -
Ubuntu snmpd_5.2.1.2-4ubuntu2.1_i386.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.1_i386.deb -
Ubuntu snmpd_5.2.1.2-4ubuntu2.1_powerpc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.1_powerpc.deb -
Ubuntu snmpd_5.2.1.2-4ubuntu2.1_sparc.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/main/n/net-snmp/snmpd_5.2.1.2-4 ubuntu2.1_sparc.deb -
Ubuntu tkmib_5.2.1.2-4ubuntu2.1_all.deb
Ubuntu 6.06 LTS:
http://security.ubuntu.com/ubuntu/pool/universe/n/net-snmp/tkmib_5.2.1 .2-4ubuntu2.1_all.deb
References
Net-SNMP TCP Disconnect Remote Denial Of Service Vulnerability
References:
References: